4 ms·
Exactly. JWTs assert claims. If your claim is not durable enough for the protocol's expiration setting (e.g. authorization, in some cases), then don't abuse JW
by quesera 4y ago
Exactly. JWTs assert claims.
If your claim is not durable enough for the protocol's expiration setting (e.g. authorization, in some cases), then don't abuse JWTs. Simple!
- eagsalazar2 4y agoThis is really nice way of putting this. Logging in/out is authorization (and authn) so generally if you want to revoke access (log people out), JWTs are possibly the wrong choice (the thing people use JWTs for 99% of the time)